Skip to content

chore(deps): bump the slack-sdk group across 1 directory with 2 updates#43

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/slack-sdk-86170fbe13
Open

chore(deps): bump the slack-sdk group across 1 directory with 2 updates#43
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/slack-sdk-86170fbe13

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 28, 2026

Bumps the slack-sdk group with 1 update in the / directory: @slack/bolt.

Updates @slack/bolt from 4.7.2 to 4.7.3

Changelog

Sourced from @​slack/bolt's changelog.

4.7.3

Patch Changes

  • 341b60e: Reject empty signingSecret at initialization to prevent accidental HMAC signature forgery.
Commits
  • 97bfd71 chore: release (#2947)
  • 341b60e fix: reject empty signingSecret to prevent involuntary signature bypass (#2946)
  • 6779cf7 chore(deps): bump qs from 6.14.2 to 6.15.2 in /examples/custom-receiver (#2943)
  • 834e3e0 chore(deps): bump ws from 8.20.0 to 8.20.1 in /examples/custom-receiver (#2942)
  • 1ed7854 chore(deps): bump koa and @​types/koa in /examples/custom-receiver (#2941)
  • ba4deb6 chore(deps-dev): update serverless requirement from ^4.35.1 to ^4.36.1 in /ex...
  • 8a2e936 chore(deps-dev): update serverless-offline requirement from ^14.5.0 to ^14.6....
  • 2cb9482 chore(deps-dev): bump @​types/node from 24.12.3 to 24.12.4 in /examples/custom...
  • 752f2e2 chore(deps): bump @​slack/web-api from 7.15.2 to 7.16.0 (#2933)
  • be24571 chore: update biome configurations and applied settings (#2931)
  • Additional commits viewable in compare view

Updates @slack/web-api from 7.15.1 to 7.16.0

Release notes

Sourced from @​slack/web-api's releases.

@​slack/web-api@​7.16.0

Minor Changes

  • 2814969: feat: add highlight_type to files.completeUploadExternal and filesUploadV2 for optimistic rendering

    import { WebClient } from "@slack/web-api";
    const client = new WebClient(process.env.SLACK_BOT_TOKEN);
    await client.filesUploadV2({
    channel_id: "C0123456789",
    file: "./image.png",
    filename: "image.png",
    title: "Image Upload",
    highlight_type: "png",
    });

@​slack/web-api@​7.15.2

Patch Changes

Commits
  • aeaf9f9 chore: release (#2597)
  • 2814969 feat(web-api): add highlight_type to files.completeUploadExternal and filesUp...
  • 963f9b0 chore: modernize prod server integration tests (#2590)
  • 3411de3 chore: release (#2579)
  • 3c4e927 fix(cli-test): invoke commands without shell intermediate (#2582)
  • 1f91b1f chore(deps): bump axios from 1.15.1 to 1.16.0 (#2584)
  • e8a087c chore: add a clean script for maintainers (#2583)
  • 5bc7685 feat(types): add BlockChunk type to chat.{start,append,stop}Stream methods (#...
  • 21b0839 test: add coverage for untested WebClient and IncomingWebhook behavior (#2581)
  • 9fa2921 docs(types): align Alert, Card, Carousel block descriptions with official doc...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the slack-sdk group with 1 update in the / directory: [@slack/bolt](https://github.com/slackapi/bolt-js).


Updates `@slack/bolt` from 4.7.2 to 4.7.3
- [Release notes](https://github.com/slackapi/bolt-js/releases)
- [Changelog](https://github.com/slackapi/bolt-js/blob/main/CHANGELOG.md)
- [Commits](slackapi/bolt-js@v4.7.2...v4.7.3)

Updates `@slack/web-api` from 7.15.1 to 7.16.0
- [Release notes](https://github.com/slackapi/node-slack-sdk/releases)
- [Commits](https://github.com/slackapi/node-slack-sdk/compare/@slack/web-api@7.15.1...@slack/web-api@7.16.0)

---
updated-dependencies:
- dependency-name: "@slack/bolt"
  dependency-version: 4.7.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: slack-sdk
- dependency-name: "@slack/web-api"
  dependency-version: 7.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: slack-sdk
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 28, 2026
@vercel
Copy link
Copy Markdown

vercel Bot commented May 28, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
pre-sales-agent Ready Ready Preview, Comment May 28, 2026 5:22pm

Request Review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants